Profession ICT auditor manager

ICT auditor managers monitor ICT auditors responsible for auditing information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy and security. They evaluate ICT infrastructure in terms of risk to the organisation and establish controls to mitigate loss. They determine and recommend improvements in the current risk management controls and in the implementation of system changes or upgrades.

Personality Type

• Conventional / Investigative

Knowledge

• ICT project management

  The methodologies for the planning, implementation, review and follow-up of ICT projects, such as the development, integration, modification and sales of ICT products and services, as well as projects relating technological innovation in the field of ICT.

• Audit techniques

  The techniques and methods that support a systematic and independent examination of data, policies, operations and performances using computer-assisted audit tools and techniques (CAATs) such as spreadsheets, databases, statistical analysis and business intelligence software.

• Control objectives for information and related technology

  The risk and controls framework such as Control Objectives for Information and Related Technology (COBIT), which supports decision makers to resolve the gap between business risks, requirements and technical issues.

• Cyber security

  The methods that protect ICT systems, networks, computers, devices, services, digital information and people against illegal or unauthorised use.

• Quality standards

  The national and international requirements, specifications and guidelines to ensure that products, services and processes are of good quality and fit for purpose.

Skills

• Ensure compliance with legal requirements

  Guarantee compliance with established and applicable standards and legal requirements such as specifications, policies, standards or law for the goal that organisations aspire to achieve in their efforts.

• Prepare financial auditing reports

  Compile information on audit findings of financial statements and financial management in order to prepare reports, point out improvement possibilities, and confirm governability.

• Build business relationships

  Establish a positive, long-term relationship between organisations and interested third parties such as suppliers, distributors, shareholders and other stakeholders in order to inform them of the organisation and its objectives.

• Ensure adherence to organisational ICT standards

  Guarantee that the state of events is in accordance with the ICT rules and procedures described by an organisation for their products, services and solutions.

• Develop audit plan

  Define all organisational tasks (time, place and order) and develop a checklist concerning the topics to be audited.

• Execute ICT audits

  Organise and execute audits in order to evaluate ICT systems, compliance of components of systems, information processing systems and information security. Identify and collect potential critical issues and recommend solutions based on required standards and solutions.

• Identify legal requirements

  Conduct research for applicable legal and normative procedures and standards, analyse and derive legal requirements that apply to the organisation, its policies and products.

• Implement ICT risk management

  Develop and implement procedures for identifying, assessing, treating and mitigating ICT risks, such as hacks or data leaks, according to the company's risk strategy, procedures and policies. Analyse and manage security risks and incidents. Recommend measures to improve digital security strategy.

• Develop ICT workflow

  Create repeatable patterns of ICT activity within an organisation which enhances the systematic transformations of products, informational processes and services through their production.

• Monitor technology trends

  Survey and investigate recent trends and developments in technology. Observe and anticipate their evolution, according to current or future market and business conditions.

• Manage IT security compliances

  Guide application and fulfilment of relevant industry standards, best practices and legal requirements for information security.

• Manage standard enterprise resource planning system

  Collect, manage and interpret data relevant for companies related to shipping, payment, inventory, resources and manufacturing using specific business management software. Such software as Microsoft Dynamics​, SAP ERP, Oracle ERP.

• Perform contract compliance audits

  Execute a thorough contract compliance audit, ensuring that goods or services are being delivered in a correct and timely fashion, checking for clerical errors or missed credits and discounts and starting procedures for cash recovery.

Optional knowledge and skills

Source: Sisyphus ODB